Information Security Risk & Compliance Analyst

Rutgers University; New Brunswick (NJ); On-site; USD 108,000 - 165,000; Full time

Job summary

Rutgers University in New Jersey is seeking an Information Security Risk Analyst to support the Office of Information Security (OIT). You will facilitate and evaluate internal and third-party risk assessments, provide remediation recommendations, and maintain a formal risk register across campus.

You will collaborate with students, faculty and staff, serve as an SME on vendor and application findings, and help develop policies to reduce information security risk, with preferred CISSP/CRISC

Qualifications

• Bachelor's degree with at least five years of relevant experience.
• Preferred CISSP or CRISC certifications.
• Experience with HIPAA, GLBA, PCI DSS and NIST CSF.
• Knowledge of risk assessments and risk registers.
• Experience collaborating with campus stakeholders.

Responsibilities

• Conduct and evaluate internal and third-party information security risk assessments.
• Recommend remediation to mitigate gaps and raise awareness of security resources.
• Maintain a formal risk register aligned with security governance.
• Collaborate with campus stakeholders to document and communicate risks.
• Serve as SME for findings from security assessments of vendors and applications.
• Assist in creating policies and procedures to reduce information security risk.

Skills

Risk assessments

Stakeholder comms

Governance & risk

NIST CSF

Regulatory knowledge

Education

Bachelor's degree in Computer Science, Information Systems, or related field

Tools

GRC platforms

Vendor risk mgmt tools

Job description

Rutgers University in New Jersey is seeking an Information Security Risk Analyst to support the Office of Information Security (OIT). You will facilitate and evaluate internal and third-party risk assessments, provide remediation recommendations, and maintain a formal risk register across campus.

You will collaborate with students, faculty and staff, serve as an SME on vendor and application findings, and help develop policies to reduce information security risk, with preferred CISSP/CRISC